sssd.git, branch manfixes System Security Services Daemon [okos' clone] MAN: Remove IPA specific LDAP settings 2013-09-10T07:45:54+00:00 Ondrej Kos okos@redhat.com 2013-09-09T14:03:23+00:00 5f9653589579c218cd8f8b1c1d0d5ef6b6df0a67 Resolves: https://fedorahosted.org/sssd/ticket/1187 
Resolves:
https://fedorahosted.org/sssd/ticket/1187
IPA: Deprecate ipa_hbac_support_srchost option 2013-09-09T13:51:15+00:00 Ondrej Kos okos@redhat.com 2013-09-09T13:51:15+00:00 1af35ea390e5e0cfce409da82fa1244d3b28a5db This option got already deprecated on the ipa server side. Option is undocumented and warning is printed both to the sssd log files and syslog. Resolves: https://fedorahosted.org/sssd/ticket/1918 
This option got already deprecated on the ipa server side.
Option is undocumented and warning is printed both to the sssd log files
and syslog.

Resolves:
https://fedorahosted.org/sssd/ticket/1918
mmap_cache: Do not remove record from chain twice 2013-09-09T11:57:27+00:00 Lukas Slebodnik lslebodn@redhat.com 2013-09-05T07:26:43+00:00 27ea6c34e9d8a914b0aeebe9ca98eb65dea404d0 It is not very likely, that record will have the same hash1 and hash2, but it is possible. In this situation, it does not make sense to remove record twice. Function sss_mc_rm_rec_from_chain was not robust and sssd_nss could crash in this situation. It was only possible if record was alone in chain. Resolves: https://fedorahosted.org/sssd/ticket/2049 
It is not very likely, that record will have the same hash1 and hash2, but it
is possible. In this situation, it does not make sense to remove record twice.

Function sss_mc_rm_rec_from_chain was not robust and sssd_nss could crash
in this situation. It was only possible if record was alone in chain.

Resolves:
https://fedorahosted.org/sssd/ticket/2049
krb5: Ingnore unknown expansion sequences 2013-09-09T11:48:43+00:00 Simo Sorce simo@redhat.com 2013-09-04T19:02:43+00:00 35da30eb7f97968aabcbd34d4e198e44470ad3dd Recently support was added to use also libkrb5 style expansions that uses a %{varname} type of template. There are a number of templates we do not care/can't expand in sssd. The current code misses tests and failed to properly preserve some of the templates we do not want to handle. Addiotionally in order to be future proof this patch treats unknown templates as pass-through templates and defer any error checking to libkrb5, so that sssd is consistent with how kinit would behave. Resolves: https://fedorahosted.org/sssd/ticket/2076 
Recently support was added to use also libkrb5 style expansions that
uses a %{varname} type of template.

There are a number of templates we do not care/can't expand in sssd.
The current code misses tests and failed to properly preserve some of
the templates we do not want to handle.

Addiotionally in order to be future proof this patch treats unknown
templates as pass-through templates and defer any error checking to
libkrb5, so that sssd is consistent with how kinit would behave.

Resolves:
https://fedorahosted.org/sssd/ticket/2076
Makefile: Fix sssd_be targets 2013-09-09T11:42:05+00:00 Simo Sorce simo@redhat.com 2013-09-05T22:50:20+00:00 2db6afe70eee2bbc22aa657a6b6609a9f3eb5d4c The $(PAM_LIBS) variable should be added to LDADD not LDFLAGS 
The $(PAM_LIBS) variable should be added to LDADD not LDFLAGS
RPM: Add new subpackage for PAC responder 2013-09-05T09:43:18+00:00 Stephen Gallagher sgallagh@redhat.com 2013-09-04T15:12:30+00:00 0e5758d02ea9e70c498f48d287e8a26c48150711 It was discovered that duplicating files in two subpackages is not permitted by Fedora packaging guidelines[1]. This patch moves the PAC responder to a new sssd-common-pac subpackage that both the sssd-ipa and sssd-ad subpackages will require. [1] https://fedoraproject.org/wiki/Packaging:Guidelines?rd=Packaging/Guidelines#DuplicateFiles 
It was discovered that duplicating files in two subpackages is not
permitted by Fedora packaging guidelines[1]. This patch moves the PAC
responder to a new sssd-common-pac subpackage that both the sssd-ipa
and sssd-ad subpackages will require.

[1] https://fedoraproject.org/wiki/Packaging:Guidelines?rd=Packaging/Guidelines#DuplicateFiles
dyndns: do not modify global family_order 2013-09-05T09:18:53+00:00 Sumit Bose sbose@redhat.com 2013-09-02T15:35:23+00:00 41bd89df256b15d8c451fc229e33cc92828ac179 Resolves: https://fedorahosted.org/sssd/ticket/2063 
Resolves:
https://fedorahosted.org/sssd/ticket/2063
AD: Rename parametrized #define 2013-09-05T09:17:50+00:00 Jakub Hrozek jhrozek@redhat.com 2013-09-04T07:53:05+00:00 56a6ae9e7a8d3bb9a973b934e42534b549293ed3 






Fix reference to sssd-krb5 man page
2013-09-05T09:16:45+00:00

Nikolai Kondrashov
Nikolai.Kondrashov@redhat.com

2013-09-04T07:24:12+00:00

aebb0ca5022b02fc8c13600acf9cf1c52d4e539c

Replace incorrect reference to "sssd-krb5.conf" manpage with the correct
"sssd-krb5" in sssd_krb5_locator_plugin man page source.





Replace incorrect reference to "sssd-krb5.conf" manpage with the correct
"sssd-krb5" in sssd_krb5_locator_plugin man page source.







ad srv: prefer servers that are in the same domain as client
2013-09-05T09:14:17+00:00

Pavel Březina
pbrezina@redhat.com

2013-08-26T14:02:51+00:00

26a9c24c0d9849e48c15847fc71216b00befcfe1

https://fedorahosted.org/sssd/ticket/2001





https://fedorahosted.org/sssd/ticket/2001